smbexec

Written because we got sick of Metasploit PSExec getting popped by certain AV's.

Special thanks to Carnal0wnage who's blog inspired us to go this route http://carnal0wnage.attackresearch.com/2012/01/psexec-fail-upload-and-exec-instead.html

-Includes payload & metasploit rc creator based on vanish.sh
-hash-passing patched smbclient to upload payload
-hash-passing patched winexe to run payload

Video of the original POC can be found at http://www.youtube.com/watch?v=o3d0wfGUCWM&feature=plcp

Tested on:
- BackTrack 5R2 - 32 & 64 Bit
- Ubuntu 10.04.4 LTS - 32 & 64 Bit
- Ubuntu 12.04 LTS - 32 & 64 Bit
- Debian 6 - 32 & 64 Bit
- Fedora 16 - 32 & 64 Bit
- Fedora 17 - 32 & 64 Bit

Coming Soon:
Pentoo
Pwnie Express - Pwn Plug 1.1

Happy hunting!

Project Activity

See All Activity >

License

GNU General Public License version 3.0 (GPLv3)

Follow smbexec

smbexec Web Site

Other Useful Business Software

Get the most trusted enterprise browser

Advanced built-in security helps IT prevent breaches before they happen

Defend against security incidents with Chrome Enterprise. Create customizable controls, manage extensions and set proactive alerts to keep your data and employees protected without slowing down productivity.

Download Chrome

Rate This Project

User Reviews

Be the first to post a review of smbexec!

Additional Project Details

Operating Systems

Linux

User Interface

Console/Terminal, X Window System (X11)

Registered

2012-06-28

Similar Business Software

Action1

Action1 is an autonomous endpoint management platform trusted by many Fortune 500 companies. Cloud-native, infinitely scalable, highly secure, and configurable in 5 minutes—it just works and is always free for the first 200 endpoints, with no functional limits. By pioneering autonomous OS and...

See Software
ManageEngine Patch Manager Plus

Keep all your production businesses up to date by automating the entire patching process using Patch Manager Plus. Available as both cloud-based and on-premise software, Patch Manager Plus offers features that include scanning for and detecting missing patches, automated scheduled patch...

See Software
StrongDM

StrongDM is a People-First Access platform that gives technical staff a direct route to the critical infrastructure they need to be their most productive. End users enjoy fast, intuitive, and auditable access to the resources they need, and administrators leverage simplified workflows to enhance...

See Software
ManageEngine Endpoint Central

ManageEngine Endpoint Central is built to secure the digital workplace while also giving IT teams complete control over their enterprise endpoints. It delivers a security-first approach by combining advanced endpoint protection with comprehensive management, allowing IT teams to manage the...

See Software
PathSolutions TotalView

PathSolutions TotalView network monitoring and troubleshooting software bridges the gap between NETWORK MONITORING and TROUBLESHOOTING RESOLUTION telling you WHEN, WHERE and WHY network errors occur. PathSolutions TotalView continuously monitors and tracks the performance of every device and...

See Software
Aikido Security

Secure your code, cloud, and runtime in one central system. Aikido’s all-in-one security platform is loved by developers and security teams alike with full security visibility, insight in what matters most, and fast/automatic vulnerability fixes. Teams get security done with Aikido thanks...

See Software